Riversmeet Advisory Limited (“Riversmeet”, “we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share personal data when you interact with our website, enquire about our services, engage us as a client, or are considered as a candidate for a role.
This policy is provided in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Riversmeet Advisory Limited is a company registered in England and Wales and a portfolio company of UAP Group. We provide executive search, leadership advisory, board consulting, and talent strategy services to clients in asset management, pensions, and investment-led financial services.
We are the data controller for the personal data we process about website visitors, prospective and existing clients, and candidates.
2. Data we collect
We collect the following categories of personal data, depending on how you interact with us.
Website visitors
- IP address, browser type, device information, and pages visited
- Any information you voluntarily provide through our contact form (name, email address, telephone number, organisation, and the content of your message)
Clients and prospective clients
- Name, job title, organisation, business contact details
- Engagement-related correspondence and records
- Information provided in the course of a search or advisory assignment
Candidates
- Identity and contact details, including nationality and right to work status
- Curriculum vitae, career history, qualifications, and references
- Compensation details, notice period, and availability
- Our interview notes and assessment records
- Information from publicly available sources such as LinkedIn, company websites, and regulatory registers
- Special category data where you provide it voluntarily, such as diversity monitoring information
If you are actively engaged as a candidate, we will provide a more detailed Candidate Privacy Notice that sets out our processing activities in full. A copy is available on request.
3. How we collect your data
- Directly from you, when you contact us, submit a form, share a CV, or correspond with us
- From publicly available sources, including professional networks and regulatory registers
- From professional referrals and introductions
- From your referees, with your consent
- From third-party service providers such as background checking providers, with your consent
- Automatically through cookies and similar technologies when you visit our website
4. How we use your data and our lawful basis
We process personal data for the following purposes:
- Providing and improving our services. Legitimate interest in running our business and delivering high-quality advisory and search work.
- Responding to enquiries. Legitimate interest in communicating with those who contact us, and where applicable, the necessity of taking steps to enter into a contract with you.
- Assessing candidate suitability for roles.Legitimate interest in conducting executive search.
- Sharing a candidate profile with a specific client.Consent, obtained before each introduction.
- Taking up references and conducting background checks.Consent, and where applicable legal obligation.
- Diversity monitoring and reporting. Explicit consent under UK GDPR Article 9.
- Meeting legal, regulatory, and accounting obligations.Legal obligation.
- Establishing, exercising, or defending legal claims.Legitimate interest.
Where we rely on legitimate interest, we have assessed that our interests do not override your fundamental rights and freedoms. You may request further information about this assessment at any time.
5. Sharing your data
We may share your personal data with the following recipients:
- Clients. We share candidate CVs, profiles, and assessments with prospective employers only with the candidate's prior consent for each specific role.
- Service providers. IT and hosting providers, professional advisers, background screening providers, and assessment partners, all bound by appropriate data processing agreements.
- Group companies. Other entities within the UAP Group for administrative purposes, subject to appropriate safeguards.
- Regulators and authorities. Where required by law, for example HMRC, the FCA, or the ICO.
We do not sell your personal data to third parties, and we do not share it for unrelated marketing purposes.
6. International transfers
Your personal data is primarily processed and stored within the United Kingdom and the European Economic Area. Where we transfer data outside the UK or EEA, for example when introducing candidates to international clients, we put appropriate safeguards in place. These include transfers to countries covered by a UK adequacy decision, Standard Contractual Clauses approved by the ICO, or your explicit consent for the specific transfer.
7. How long we keep your data
We retain personal data only for as long as necessary for the purposes for which it was collected, or to meet legal, accounting, or reporting requirements. Our standard retention periods are:
- Active candidate records: 3 years from last meaningful contact
- Placed candidate records: 6 years from the placement date
- Client engagement records: 6 years from the end of the engagement
- Enquiry correspondence: 3 years from last contact
- Consent records: duration of consent plus 1 year
- Diversity monitoring data: anonymised after 12 months
At the end of the relevant retention period, your data is securely deleted or anonymised.
8. Your rights
Under the UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure of your data in certain circumstances
- Restrict or object to processing in certain circumstances
- Receive your data in a portable, machine-readable format
- Withdraw consent at any time where we rely on consent as the lawful basis, without affecting the lawfulness of processing carried out before withdrawal
To exercise any of these rights, please email privacy@riversmeetadvisory.com. We will respond within one calendar month. In exceptional circumstances we may extend this by a further two months, in which case we will explain the reason.
9. Automated decision-making
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. All candidate assessments involve meaningful human judgement.
10. Cookies and website analytics
Our website uses cookies and similar technologies to ensure the site functions correctly, to remember your preferences, and to understand how visitors use the site so we can improve it. Non-essential cookies are only set where permitted under applicable law. You can control cookies through your browser settings, though disabling certain cookies may affect site functionality.
11. Security
We have appropriate technical and organisational measures in place to protect personal data against unauthorised access, loss, alteration, or disclosure. Access to personal data is restricted to those who need it to perform their role, and all staff are bound by duties of confidentiality.
12. Changes to this policy
We may update this Privacy Policy from time to time. The most recent version will always be available on our website, with the effective date shown at the top. Where changes are significant, we will notify you directly where practicable.
13. Complaints
If you are unhappy with how we have handled your personal data, we would welcome the opportunity to address your concerns. Please contact us first at privacy@riversmeetadvisory.com.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Information Commissioner's Office
- Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- Telephone: 0303 123 1113
- Website: www.ico.org.uk
14. Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact:
- Data Protection Lead, Riversmeet Advisory Limited
- Email: privacy@riversmeetadvisory.com
- General enquiries: hello@riversmeetadvisory.com
See also our Terms of Service.